2586 matches found
PT-2020-16931
Name of the Vulnerable Software and Affected Versions SourceCodester Simple Grocery Store Sales And Inventory System version 1.0 Description An issue was discovered in the web login functionality, allowing authentication bypass. This enables an attacker to gain client privileges via SQL injection...
CVE-2020-27886
An issue was discovered in EyesOfNetwork eonweb 5.3-7 through 5.3-8. The eonweb web interface is prone to a SQL injection, allowing an unauthenticated attacker to exploit the usernameavailable function of the includes/functions.php file which is called by login.php...
Sql injection
An issue was discovered in EyesOfNetwork eonweb 5.3-7 through 5.3-8. The eonweb web interface is prone to a SQL injection, allowing an unauthenticated attacker to exploit the usernameavailable function of the includes/functions.php file which is called by login.php...
CVE-2020-27886: Improper Neutralization of Special Elements used in an SQL Command
An issue was discovered in EyesOfNetwork eonweb 5.3-7 through 5.3-8. The eonweb web interface is prone to a SQL injection, allowing an unauthenticated attacker to exploit the usernameavailable function of the includes/functions.php file which is called by login.php...
PT-2020-16825
Name of the Vulnerable Software and Affected Versions EyesOfNetwork eonweb versions 5.3-7 through 5.3-8 Description The issue is related to a SQL injection in the eonweb web interface, allowing an unauthenticated attacker to exploit the username available function of the includes/functions.php...
CVE-2020-18129
A CSRF vulnerability in Eyoucms v1.2.7 allows an attacker to add an admin account via login.php...
Cross site request forgery (csrf)
A CSRF vulnerability in Eyoucms v1.2.7 allows an attacker to add an admin account via login.php...
CVE-2020-18129
A CSRF vulnerability in Eyoucms v1.2.7 allows an attacker to add an admin account via login.php...
Default credentials
tiki-login.php in Tiki before 21.2 sets the admin password to a blank value after 50 invalid login attempts...
CVE-2020-15906
tiki-login.php in Tiki before 21.2 sets the admin password to a blank value after 50 invalid login attempts...
CVE-2020-15906
CVE-2020-15906 affects Tiki Wiki CMS GroupWare before 21.2. The flaw in tiki-login.php allows an authentication bypass: after 50 invalid login attempts, the admin password is set to blank, permitting unauthenticated admin access. Remediation: upgrade to version 21.2 or later. CVSS 3.1 base score ...
CVE-2020-18129: Cross-Site Request Forgery (CSRF)
A CSRF vulnerability in Eyoucms v1.2.7 allows an attacker to add an admin account via login.php...
CVE-2020-15906: Improper Restriction of Excessive Authentication Attempts
tiki-login.php in Tiki before 21.2 sets the admin password to a blank value after 50 invalid login attempts...
PT-2020-15085
Name of the Vulnerable Software and Affected Versions Eyoucms version 1.2.7 Description A CSRF issue allows an attacker to add an admin account via the "login.php" endpoint. This can be exploited to gain unauthorized access to the system. Recommendations For Eyoucms version 1.2.7, consider...
Design/Logic Flaw
phpRedisAdmin before 1.13.2 allows XSS via the login.php username parameter...
CVE-2020-27163
phpRedisAdmin before 1.13.2 allows XSS via the login.php username parameter...
CVE-2020-27163
phpRedisAdmin before 1.13.2 allows XSS via the login.php username parameter...
CVE-2020-27163: Improper Neutralization of Input During Web Page Generation
phpRedisAdmin before 1.13.2 allows XSS via the login.php username parameter...
PT-2020-16644
Name of the Vulnerable Software and Affected Versions phpRedisAdmin versions prior to 1.13.2 Description The issue allows for XSS via the username parameter in the "login.php" endpoint. This affects a significant number of devices, but the exact count is not specified. There is no information...